This vulnerability exists in Edimax BR-6675nD version 1.12 within the POST request handler for the formPPPoESetup function. Specifically, improper handling of the pppUserName parameter allows an attacker to trigger a buffer overflow remotely. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not issued any fix or advisory, and no patch information is available.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on the affected device. The high CVSS score indicates significant impact on confidentiality, integrity, and availability. However, no confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider mitigating exposure by restricting network access to the affected device's management interface and monitoring for suspicious activity. Applying any future official patches promptly is recommended once available.